$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa File: 157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa (raw, json) Hash identifier: BMNlwTFKHyGIZWUX8y0XrWrbUnl2pusxpKjPHV2Pd7k= Subject key identifier: AC:6B:61:E8:16:EB:C9:E7:A3:BD:03:49:75:7F:B5:B6:75:B7:11:AC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F4C3D712F2014554D44009240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 30036 IP address blocks: 173.20.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:71:2f:20:14:55:4d:44:00:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=339b8ad9-dbc4-470e-b3a5-c74de5950d2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:48:ea:42:e9:fa:93:49:bf:c5:9b:3c:25: 7e:93:67:b2:21:65:da:4e:b4:5a:fb:21:d1:18:ec: f5:7f:ae:73:20:20:96:35:eb:b4:07:56:2e:7e:f9: cc:84:31:e2:4c:a6:24:fb:17:34:5a:42:97:80:4a: bc:4a:10:33:27:ae:fa:2d:3a:e0:2f:6f:4a:b1:22: 9f:f5:a0:26:fb:9b:f7:f4:7f:b0:6e:2c:9c:c4:59: 0e:59:66:81:80:7b:7f:00:37:6f:ac:0d:b1:3b:c9: 1d:cc:7f:92:92:42:a4:50:1f:17:e0:10:d0:7d:5b: 38:34:1f:5c:1b:47:53:fe:01:fc:9c:b8:00:c9:9d: 43:1e:c1:11:9c:b4:cb:15:a9:55:97:2e:e6:eb:c3: 41:f2:2d:c0:90:7d:9c:aa:66:bd:81:dc:cc:63:47: 9d:06:fc:b9:b3:d7:61:d0:20:c4:ab:3c:a4:0e:d1: 44:1a:64:86:60:b9:55:25:b5:f3:03:c0:48:9e:3a: fb:9e:ee:58:7f:7e:90:16:aa:be:01:ac:d2:ba:49: f4:8c:10:43:19:5b:b2:82:6c:60:97:d2:b9:32:7c: 04:fb:1a:8d:15:bf:78:9d:85:2d:a7:e7:65:16:fe: 83:33:4a:c4:c7:15:43:d2:92:b1:00:c4:23:30:08: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6B:61:E8:16:EB:C9:E7:A3:BD:03:49:75:7F:B5:B6:75:B7:11:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/157f8c54-a6da-3b0f-9d90-8ae472c8d070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c8:3f:bb:f6:c4:38:d5:56:d0:70:8c:25:b5:cf:61:49:41: ea:48:05:e3:2c:8c:70:59:8e:d0:ba:cc:1b:af:50:2c:1c:9f: d4:93:d3:08:4b:8e:92:b5:38:a1:60:00:3b:df:5f:08:c9:73: 43:e1:ec:9d:68:80:64:3e:3b:c7:7b:7f:c4:11:97:d1:6f:a2: 8e:72:be:5b:c2:29:d3:02:54:98:99:1f:80:f8:10:14:a2:32: cf:f2:6d:b9:ba:6f:ec:38:df:b1:bd:2b:26:b7:2f:d6:13:ab: 80:49:1c:87:8c:51:a3:f3:d4:e8:f6:9a:bb:26:64:29:88:7d: eb:f1:48:d7:17:27:7c:c7:c0:13:48:9c:9e:a6:59:71:3a:c6: fd:80:cf:ab:e7:f6:1c:c3:0a:9d:02:41:22:05:5d:d2:0e:8f: 8c:d1:b1:4a:ae:aa:0a:5f:76:3a:c9:e8:32:ab:b8:0c:8e:87: 36:8d:e4:ee:25:d3:e1:62:e6:0c:4d:10:8d:bf:66:4c:f1:47: 7d:b1:9a:45:8e:e6:74:33:9d:56:c0:70:75:b5:64:b3:1a:a4: 1e:57:af:19:5a:50:5f:e8:dc:07:46:e1:75:4e:4a:c7:ce:04: dd:82:5a:7e:aa:f4:46:d1:58:d1:7d:a3:88:d2:e1:61:76:db: 2b:f6:5d:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPXEvIBRVTUQAkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MzM5YjhhZDktZGJjNC00NzBlLWIzYTUtYzc0ZGU1OTUwZDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLZI6kLp+pNJv8WbPCV+k2eyIWXaTrRa+yHR GOz1f65zICCWNeu0B1YufvnMhDHiTKYk+xc0WkKXgEq8ShAzJ676LTrgL29KsSKf 9aAm+5v39H+wbiycxFkOWWaBgHt/ADdvrA2xO8kdzH+SkkKkUB8X4BDQfVs4NB9c G0dT/gH8nLgAyZ1DHsERnLTLFalVly7m68NB8i3AkH2cqma9gdzMY0edBvy5s9dh 0CDEqzykDtFEGmSGYLlVJbXzA8BInjr7nu5Yf36QFqq+AazSukn0jBBDGVuygmxg l9K5MnwE+xqNFb94nYUtp+dlFv6DM0rExxVD0pKxAMQjMAhT5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxrYegW68nno70DSXV/tbZ1txGsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTU3ZjhjNTQtYTZkYS0z YjBmLTlkOTAtOGFlNDcyYzhkMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3IP7v2xDjVVtBwjCW1z2FJQepIBeMsjHBZjtC6zBuvUCwcn9ST0whL jpK1OKFgADvfXwjJc0Ph7J1ogGQ+O8d7f8QRl9Fvoo5yvlvCKdMCVJiZH4D4EBSi Ms/ybbm6b+w437G9Kya3L9YTq4BJHIeMUaPz1Oj2mrsmZCmIfevxSNcXJ3zHwBNI nJ6mWXE6xv2Az6vn9hzDCp0CQSIFXdIOj4zRsUquqgpfdjrJ6DKruAyOhzaN5O4l 0+Fi5gxNEI2/ZkzxR32xmkWO5nQznVbAcHW1ZLMapB5XrxlaUF/o3AdG4XVOSsfO BN2CWn6q9EbRWNF9o4jS4WF22yv2XaY= -----END CERTIFICATE-----Generated at Sat Sep 26 18:13:36 2026 by rpki-client